Comment by Aboutplants

Or, they have bot scanners constantly looking for vulnerabilities and acted quickly once one appeared